removing BA detections

splunk · Jul 9, 2024 · 8960c82 · 8960c82
1 parent fdf9d92
commit 8960c82
Show file tree

Hide file tree

Showing 345 changed files with 4,798 additions and 32,537 deletions.
diff --git a/dev_ssa/endpoint/ssa___anomalous_usage_of_archive_tools.yml b/dev_ssa/endpoint/ssa___anomalous_usage_of_archive_tools.yml
diff --git a/dev_ssa/endpoint/ssa___attacker_tools_on_endpoint.yml b/dev_ssa/endpoint/ssa___attacker_tools_on_endpoint.yml
diff --git a/dev_ssa/endpoint/ssa___attempt_to_delete_services.yml b/dev_ssa/endpoint/ssa___attempt_to_delete_services.yml
diff --git a/dev_ssa/endpoint/ssa___attempt_to_disable_services.yml b/dev_ssa/endpoint/ssa___attempt_to_disable_services.yml
diff --git a/dev_ssa/endpoint/ssa___attempted_credential_dump_from_registry_via_reg_exe.yml b/dev_ssa/endpoint/ssa___attempted_credential_dump_from_registry_via_reg_exe.yml
diff --git a/dev_ssa/endpoint/ssa___bcdedit_failure_recovery_modification.yml b/dev_ssa/endpoint/ssa___bcdedit_failure_recovery_modification.yml